如何用ssh做安全管道开通rlogin或rsh？

yongjian

系统中因需要开放rsh（512）端口，但为安全起见，向通过ssh安全管道转发， 请问怎样实现呢？谢谢！

包子

很麻烦的……
参考此文
http://www.linuxsir.cn/bbs/showthread.php?threadid=77784

yongjian

谢谢版主，先拜读大文然后我试试看。

yongjian

linux下试了, 只有telnet成功了, rlogin, rexec都没有成功. 还有就是防火墙的对应端口也得开着, 不然也不成. 有什么办法即能加密又能将port转发使到不用default的port呢.

包子

这个是SSH的解决方法，道理就和windows下的端口转发一样的  
   -L port:host:hostport
             Specifies that the given port on the local (client) host is to be forwarded to the given host and port on the
             remote side.  This works by allocating a socket to listen to port on the local side, and whenever a connec-
             tion is made to this port, the connection is forwarded over the secure channel, and a connection is made to
             host port hostport from the remote machine.  Port forwardings can also be specified in the configuration
             file.  Only root can forward privileged ports.  IPv6 addresses can be specified with an alternative syntax:
             port/host/hostport

     -R port:host:hostport
             Specifies that the given port on the remote (server) host is to be forwarded to the given host and port on
             the local side.  This works by allocating a socket to listen to port on the remote side, and whenever a con-
             nection is made to this port, the connection is forwarded over the secure channel, and a connection is made
             to host port hostport from the local machine.  Port forwardings can also be specified in the configuration
             file.  Privileged ports can be forwarded only when logging in as root on the remote machine.  IPv6 addresses
             can be specified with an alternative syntax: port/host/hostport

还可以用stunnel来解决……

http://www-900.ibm.com/developer ... /s-stun/index.shtml

http://hammer.prohosting.com/~cachenow/forum/messages/6266.html

你可以参考这两个文章的

yongjian

恩,好文章,顶! 谢谢包子!